
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/6C8823E2378211EA8FE81077C4F9AE02.roa
File: 6C8823E2378211EA8FE81077C4F9AE02.roa (raw, json)
Hash identifier: HiKAMlyOzO3hjDAQ70KLboDAw8zECF7jQ0Cq/PsrM04=
Subject key identifier: C6:65:1D:0B:DA:02:2C:50:BE:FF:53:DA:4B:B9:2E:91:82:93:A7:C9
Certificate issuer: /CN=A91D12C2/serialNumber=166520A415A754E358652C5790CE86B4B2632DD1
Certificate serial: 0B92
Authority key identifier: 16:65:20:A4:15:A7:54:E3:58:65:2C:57:90:CE:86:B4:B2:63:2D:D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/6C8823E2378211EA8FE81077C4F9AE02.roa
Signing time: Tue 28 Oct 2025 19:08:12 +0000
ROA not before: Tue 28 Oct 2025 19:08:12 +0000
ROA not after: Wed 31 Jan 2029 00:00:00 +0000
asID: 64046
IP address blocks: 103.198.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.crl
rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 19:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2962 (0xb92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D12C2, serialNumber=166520A415A754E358652C5790CE86B4B2632DD1
Validity
Not Before: Oct 28 19:08:12 2025 GMT
Not After : Jan 31 00:00:00 2029 GMT
Subject: CN=6901149b-e72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:28:a2:6f:52:7d:c8:86:51:46:a2:ee:de:da:
e7:e0:65:49:26:6d:27:4c:d3:22:49:08:28:11:52:
31:94:f3:e3:8e:b6:29:f2:34:1a:61:41:a0:8b:68:
26:db:ca:55:c9:32:09:b0:04:cd:b1:fa:72:b3:f7:
65:82:e6:ea:ca:1e:7f:20:47:89:37:4f:d5:75:97:
2a:d4:8a:f0:9b:18:14:c9:c5:75:ce:7d:c2:57:91:
31:02:9d:06:d3:65:b2:58:a4:21:bd:6e:23:07:50:
8f:21:39:e3:e2:8f:f1:57:cd:47:2e:28:cb:b4:ff:
f6:c7:2a:35:69:4a:c1:af:c3:07:8d:25:0b:c5:c2:
88:5f:e0:15:03:0e:86:cc:c6:bd:35:b9:d5:0f:e8:
ec:c1:c3:4e:fd:a7:5c:06:e0:05:33:a3:9e:3d:fd:
e2:13:af:d3:1d:33:db:c0:eb:fc:d9:32:24:9b:1f:
64:54:40:eb:9f:97:2c:41:98:51:32:45:73:df:29:
4c:da:ff:04:d9:39:2b:35:8d:a9:ba:b0:64:de:c5:
3b:e2:21:c7:6f:53:a4:83:49:24:25:eb:92:94:fb:
c9:1d:5f:df:74:62:a4:c5:b1:1e:9f:fd:3c:8c:22:
76:17:01:ca:fc:4f:50:15:07:cb:12:5d:d3:bd:ce:
19:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:65:1D:0B:DA:02:2C:50:BE:FF:53:DA:4B:B9:2E:91:82:93:A7:C9
X509v3 Authority Key Identifier:
keyid:16:65:20:A4:15:A7:54:E3:58:65:2C:57:90:CE:86:B4:B2:63:2D:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/6C8823E2378211EA8FE81077C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.198.2.0/23
Signature Algorithm: sha256WithRSAEncryption
20:5a:96:cb:d0:9c:b8:4f:a3:59:ca:7c:69:d6:ee:fe:11:57:
97:20:cc:0e:53:22:f6:ac:65:b4:ab:b9:c3:8d:a4:e0:08:9d:
0c:53:3e:f4:25:a2:2a:07:73:a1:7f:60:00:9a:18:03:f4:b1:
c7:39:64:e6:d9:19:b0:ff:fb:dc:bc:62:60:97:b5:d1:92:cc:
86:92:da:2a:1a:fa:d9:ab:fa:10:08:51:80:59:49:7b:cd:08:
0b:e6:5b:b5:3f:99:aa:aa:2b:a5:c5:08:c1:55:1b:9b:ea:06:
b7:aa:a6:b6:47:8b:e9:6b:85:43:b1:fc:ec:39:3a:ac:a7:c9:
41:27:7e:8a:9d:4b:00:af:00:56:ba:02:d7:1a:46:4d:64:ac:
ce:11:13:a4:f4:b0:3c:ae:b8:fc:df:c2:0c:dd:b3:07:c5:d8:
f0:88:26:40:1c:b9:f5:bb:88:cb:b0:57:46:79:0f:04:14:ed:
5d:2f:65:63:05:89:95:61:43:17:28:76:84:9f:6a:82:2a:be:
d4:15:12:c8:b5:21:88:0e:8b:db:57:e7:33:2a:03:21:de:8f:
47:04:e9:93:21:6e:7a:9d:67:6f:5a:72:cf:d3:b5:15:67:20:
6b:8f:96:86:79:e0:39:a6:44:ce:09:72:43:fd:68:90:04:6e:
25:1b:cd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:10:00 2025 by rpki-client